Hey everyone,
I just watched:
Life without Kubernetes: Hosting Mirrors with NixOS
by @Prince213 - nice talk! I would have also chosen WireGuard 
I remembered that I also wrote a small guide on my favourite way to deploy with Nix and totally never shared it here, so I thought I’d do that now.
Hopefully external links are alright.
There is the Post and a GitHub repo with an example implementation.
Feel free to ask any questions!
Hope its helpful.
Also looking forward to testing NixOps 4 some time soon🫶🏻